Superdrug

{
  "id": "0cff4473-e61f-47fa-b840-154a75128796",
  "url": "https://www.intigriti.com/programs/aswatson/superdrug/detail",
  "name": "Superdrug",
  "handle": "superdrug",
  "status": "open",
  "targets": {
    "in_scope": [
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "www.superdrug.com",
        "description": "This is Superdrug, our online Pharmacy in the UK"
      },
      {
        "type": "ios",
        "impact": "Tier 1",
        "endpoint": "Superdrug iOS",
        "description": "This is our Superdrug (iOS) app.\nApp link: https://apps.apple.com/gb/app/superdrug/id1267896687"
      },
      {
        "type": "android",
        "impact": "Tier 1",
        "endpoint": "Superdrug Android",
        "description": "This is our Superdrug (Android) app.\nApp link: https://play.google.com/store/apps/details?id=superdrug.com.beautycard"
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "api.superdrug.com",
        "description": "This is the API server for the www.superdrug.com website\nAPI spec: https://api.superdrug.com/api/v2/api-docs"
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "media.superdrug.com",
        "description": "This subdomain is used to store static content for the www.superdrug.com e-commerce website"
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "app.superdrug.com",
        "description": "This is the API server of the Superdrug mobile app"
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "campaign.superdrug.com",
        "description": "This is a marketing related application from Superdrug"
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "community.superdrug.com",
        "description": "This is the social community website from Superdrug"
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "ecom-data.superdrug.com",
        "description": "This is a marketing related application from Superdrug"
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "videogp-api.superdrug.com",
        "description": "This is the API server for the Superdrug Video GP website."
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "healthclinics.superdrug.com",
        "description": "This is the Superdrug Healthclinics website."
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "innovation.superdrug.com",
        "description": "This is a marketing related application from Superdrug"
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "onlinedoctor.superdrug.com",
        "description": "This is the Superdrug Online Doctor website."
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "onlinepharmacy.superdrug.com",
        "description": "This is the Superdrug Online Pharmacy (Wordpress) website."
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "videogp.superdrug.com",
        "description": "This website can be used by customers to set a video appointment with a GP."
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "app.pharmacy.superdrug.com",
        "description": "This is the authenticated portal for customers from Superdrug Online Pharmacy website."
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "appt.healthclinics.superdrug.com",
        "description": "This is the online booking system for Superdrug Healthclinics."
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "www.superdrugmobile.com",
        "description": "This is the Superdrug Mobile website"
      },
      {
        "type": "wildcard",
        "impact": null,
        "endpoint": "*.superdrug.com",
        "description": "This asset contains all other applications on this wildcard not explicitly mentioned in the scope.\nReports on these applications may be eligible for bonuses, chosen by the program team."
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "www.savers.co.uk",
        "description": "This is Savers, our online Pharmacy in the UK"
      },
      {
        "type": "ios",
        "impact": "Tier 1",
        "endpoint": "Savers iOS",
        "description": "This is our Savers (iOS) app.\nApp link: https://apps.apple.com/gb/app/savers/id6451311397"
      },
      {
        "type": "android",
        "impact": "Tier 1",
        "endpoint": "Savers Android",
        "description": "This is our Savers (Android) app.\nApp link: https://play.google.com/store/apps/details?id=uk.co.savers"
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "api.savers.co.uk",
        "description": "This is the API server for the www.savers.co.uk website\nAPI spec: https://api.savers.co.uk/api/v2/api-docs"
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "media.savers.co.uk",
        "description": "This subdomain is used to store static content for the www.savers.co.uk e-commerce website"
      },
      {
        "type": "url",
        "impact": "Tier 1",
        "endpoint": "app.savers.co.uk",
        "description": "This is the API server of the Savers mobile app"
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "campaign.savers.co.uk",
        "description": "This is a marketing related application from Superdrug"
      },
      {
        "type": "url",
        "impact": null,
        "endpoint": "ecom-data.savers.co.uk",
        "description": "This is a marketing related application from Superdrug"
      },
      {
        "type": "wildcard",
        "impact": null,
        "endpoint": "*.savers.co.uk",
        "description": "This asset contains all other applications on this wildcard not explicitly mentioned in the scope.\nReports on these applications may be eligible for bonuses, chosen by the program team."
      }
    ],
    "out_of_scope": []
  },
  "max_bounty": {
    "value": 8500,
    "currency": "USD"
  },
  "min_bounty": {
    "value": 10,
    "currency": "USD"
  },
  "tacRequired": false,
  "company_handle": "aswatson",
  "twoFactorRequired": false,
  "confidentiality_level": "public"
}