— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Yoti.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": null,
"average_time_to_first_program_response": 1692,
"average_time_to_report_resolved": null,
"handle": "yoti",
"id": 0,
"managed_program": false,
"name": "Yoti",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 32,
"submission_state": "open",
"url": "https://hackerone.com/yoti",
"website": "http://www.yoti.com",
"targets": {
"in_scope": [
{
"asset_identifier": "983980808",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "https://itunes.apple.com/us/app/yoti/id983980808",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "api.yoti.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "ccloud.yoti.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "code.yoti.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "com.yoti.mobile.android.live",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "https://play.google.com/store/apps/details?id=com.yoti.mobile.android.live",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "core.yoti.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "hub.yoti.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "you must use \"[Hackerone] <whatever name here>\" when creating any organisation/application/service within Hub!",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "identity.yoti.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "www.yotisign.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "You must use \"[Hackerone] ORG_NAME\" when registering an organisation!",
"integrity_requirement": "high",
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "Yoti Password Manager browser extension",
"asset_type": "OTHER",
"availability_requirement": "low",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "none"
},
{
"asset_identifier": "Yoti liveness detection campaign",
"asset_type": "OTHER",
"availability_requirement": "none",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "none"
},
{
"asset_identifier": "developers.yoti.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Please DO NOT test this domain - it is a third party hosted documentation site for developers, and not of concern to us. The third-party service DO NOT want this site tested. Thank you!",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "www.yoti.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Please DO NOT report items from this website, unless you deem them to be critical in nature. WPSCAN findings will not be accepted.",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}983980808· criticalYoti Password Manager browser extensionYoti liveness detection campaign