Personio

{
  "id": "694f3e58-f408-4a3f-8e2a-1b562650399a",
  "url": "https://www.intigriti.com/programs/personio/personio/detail",
  "name": "Personio",
  "handle": "personio",
  "status": "open",
  "targets": {
    "in_scope": [
      {
        "type": "wildcard",
        "impact": "Tier 2",
        "endpoint": "*.app.personio-dev.com",
        "description": null
      },
      {
        "type": "wildcard",
        "impact": "Tier 2",
        "endpoint": "*.app.personio.com",
        "description": null
      },
      {
        "type": "wildcard",
        "impact": "Tier 2",
        "endpoint": "*.personio-internal.de",
        "description": null
      },
      {
        "type": "wildcard",
        "impact": "Tier 2",
        "endpoint": "*.personio.tools",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 2",
        "endpoint": "api.personio-dev.com",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 2",
        "endpoint": "api.personio.com",
        "description": null
      },
      {
        "type": "wildcard",
        "impact": "Tier 2",
        "endpoint": "https://*.personio.de",
        "description": null
      },
      {
        "type": "wildcard",
        "impact": "Tier 2",
        "endpoint": "https://*.personiowhistleblowing.com",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 2",
        "endpoint": "https://hug.personio.com",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 2",
        "endpoint": "https://sec-test-<intigriti handle>-<nn>.personio.de",
        "description": "Please see FAQ for creation instructions"
      },
      {
        "type": "url",
        "impact": "Tier 3",
        "endpoint": "https://www.personio.com/free-trial/",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 3",
        "endpoint": "https://www.personio.de/kostenlos-testen/",
        "description": null
      },
      {
        "type": "url",
        "impact": "Tier 3",
        "endpoint": "https://community.personio.com",
        "description": "This is a feature outsourced to [Gainsight](https://www.gainsight.com/).\nPlease use [their Vulnerability Disclosure Program](https://www.gainsight.com/security/vulnerability-disclosure-program/) for any findings, but feel free to drop a submission here if its a `Critical` finding that direcly entails a High impact to Personio."
      },
      {
        "type": "url",
        "impact": "Tier 3",
        "endpoint": "Other assets owned by Personio",
        "description": null
      }
    ],
    "out_of_scope": [
      {
        "type": "url",
        "impact": "Out of scope",
        "endpoint": " www.personio.de",
        "description": null
      },
      {
        "type": "url",
        "impact": "Out of scope",
        "endpoint": "personio.slack.com",
        "description": null
      },
      {
        "type": "url",
        "impact": "Out of scope",
        "endpoint": "statuspage.personio.de",
        "description": null
      },
      {
        "type": "url",
        "impact": "Out of scope",
        "endpoint": "support.personio.de",
        "description": null
      },
      {
        "type": "url",
        "impact": "Out of scope",
        "endpoint": "www.personio.com",
        "description": null
      },
      {
        "type": "url",
        "impact": "Out of scope",
        "endpoint": "www.personio.es",
        "description": null
      }
    ]
  },
  "max_bounty": {
    "value": 5000,
    "currency": "EUR"
  },
  "min_bounty": {
    "value": 50,
    "currency": "EUR"
  },
  "tacRequired": false,
  "company_handle": "personio",
  "twoFactorRequired": false,
  "confidentiality_level": "public"
}