how we sort the index, not an estimate of what you’ll earn
Attack surface
7 in-scope
*.cloudways.comscope· Tier 2api.cloudways.com· Tier 2developers.cloudways.com· Tier 2platform.cloudways.com· Tier 2unified.cloudways.com· Tier 2www.cloudways.com· Tier 2css-tricks.com· Tier 3none listed
first indexed
92d ago · 7 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Cloudways by DigitalOcean.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "afeb2624-ac2e-46bc-b078-b0e018baeb62",
"url": "https://www.intigriti.com/programs/digitalocean/cloudways/detail",
"name": "Cloudways by DigitalOcean",
"handle": "cloudways",
"status": "open",
"targets": {
"in_scope": [
{
"type": "wildcard",
"impact": "Tier 2",
"endpoint": "*.cloudways.com",
"description": "All external services/software like `support.cloudways.com` and `feedback.cloudways.com` that are not owned, managed or controlled by Cloudways are considered out of scope and ineligible for rewards."
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "api.cloudways.com",
"description": "Cloudways API offers an alternative to the Cloudways Platform. Many, but not all actions that Cloudways Platform allows through the UI can also be performed through Cloudways API.\n\nIn the event a vulnerability is applicable to both the Cloudways Platform (platform.cloudways.com) and API, it will be treated as one root incident."
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "developers.cloudways.com",
"description": "Cloudways Developers authorizes the API key to use Cloudways API. The vulnerability testing of this target should focus on the process of API authorization ONLY. All other areas on Cloudways developers are strictly OUT OF SCOPE."
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "platform.cloudways.com",
"description": "Cloudways Platform is the primary target for this program. Cloudways Platform is the main interaction point for Cloudways customers. Through the Platform, customers could launch managed cloud servers and then set up their application on these servers. Once the application is up, Cloudways Platform provides users with options to manage their servers and applications."
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "unified.cloudways.com",
"description": "Cloudways Platofrm with new UI along with new api and backend to handle all the services of Cloudways"
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "www.cloudways.com",
"description": "Cloudways website is the corporate website that is often the initial touchpoint for a significant number of interactions between visitors, customers and Cloudways. It offers product details and related corporate information to visitors.\n"
},
{
"type": "url",
"impact": "Tier 3",
"endpoint": "css-tricks.com",
"description": null
}
],
"out_of_scope": []
},
"max_bounty": {
"value": 4000,
"currency": "USD"
},
"min_bounty": {
"value": 50,
"currency": "USD"
},
"tacRequired": false,
"company_handle": "digitalocean",
"twoFactorRequired": false,
"confidentiality_level": "public"
}