Personio

{
  "id": "694f3e58-f408-4a3f-8e2a-1b562650399a",
  "name": "Personio",
  "company_handle": "personio",
  "handle": "personio",
  "url": "https://www.intigriti.com/programs/personio/personio/detail",
  "status": "open",
  "confidentiality_level": "public",
  "tacRequired": false,
  "twoFactorRequired": false,
  "min_bounty": {
    "value": 50,
    "currency": "EUR"
  },
  "max_bounty": {
    "value": 5000,
    "currency": "EUR"
  },
  "targets": {
    "in_scope": [
      {
        "type": "wildcard",
        "endpoint": "*.app.personio-dev.com",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "wildcard",
        "endpoint": "*.app.personio.com",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "wildcard",
        "endpoint": "*.personio-internal.de",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "wildcard",
        "endpoint": "*.personio.tools",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "api.personio-dev.com",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "api.personio.com",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "wildcard",
        "endpoint": "https://*.personio.de",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "wildcard",
        "endpoint": "https://*.personiowhistleblowing.com",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "https://community.personio.com",
        "description": "It is recommended for researchers to follow the following process for our community platform so as to avoid spamming regular user. Any activity not within the following parameters will not be considered a valid submissions:\n\n**Step 1:**\nGo to 🇪🇺 https://community.personio.com or 🇩🇪https://community.personio.de\n\n**Step 2:**\nIf you have an account, click on 🇪🇺 Log in or 🇩🇪Einloggen to log in.\nIf you don’t have an account yet, Click on Sign up or Registrieren in the Menu Bar to sign up\n\n**Step 3:**\nClick on 🇪🇺 Ask the Community or 🇩🇪Frag’ die Community to publish a new thread / post.\n\n**Step 4:**\nWhen publishing your post, select the Category: \"Hacking Playground\" which has been setup specifically for Intigriti researchers\n\nIf you just signed up and cannot see it yet, please wait a couple minutes then refresh.\nIf you still cannot see it, please contact community@personio.de for assistance.\n\nAs a result, your post will land in the Hacking Playground Area.\n\n🇪🇺https://community.personio.com/hacking-playground-156 or 🇩🇪https://community.personio.de/hacking-playground-243\n",
        "impact": "Tier 3"
      },
      {
        "type": "url",
        "endpoint": "https://hug.personio.com",
        "description": null,
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "https://sec-test-<intigriti handle>-<nn>.personio.de",
        "description": "Please see FAQ for creation instructions ",
        "impact": "Tier 2"
      },
      {
        "type": "url",
        "endpoint": "https://www.personio.com/free-trial/",
        "description": null,
        "impact": "Tier 3"
      },
      {
        "type": "url",
        "endpoint": "https://www.personio.de/kostenlos-testen/",
        "description": null,
        "impact": "Tier 3"
      },
      {
        "type": "url",
        "endpoint": "Other assets owned by Personio",
        "description": null,
        "impact": "Tier 3"
      }
    ],
    "out_of_scope": [
      {
        "type": "url",
        "endpoint": " www.personio.de",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "personio.slack.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "statuspage.personio.de",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "support.personio.de",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "www.personio.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "www.personio.es",
        "description": null,
        "impact": "Out of scope"
      }
    ]
  }
}