Doctolib

{
  "id": "doctolib-public-bug-bounty-program",
  "name": "Doctolib",
  "public": true,
  "disabled": false,
  "managed": null,
  "min_bounty": 0,
  "max_bounty": 50000,
  "targets": {
    "in_scope": [
      {
        "target": "www.doctolib.(fr|de|it)",
        "type": "web-application"
      },
      {
        "target": "pro.doctolib.(fr|de|it) (see \"Free features for healthcare professionals\"))",
        "type": "web-application"
      },
      {
        "target": "Special scenarios (see description)",
        "type": "web-application"
      },
      {
        "target": "*.doctolib.(fr|de|it|com|net)",
        "type": "web-application"
      },
      {
        "target": "https://apps.apple.com/fr/app/doctolib/id925339063",
        "type": "mobile-application-ios"
      },
      {
        "target": "http://play.google.com/store/apps/details?id=fr.doctolib.www",
        "type": "mobile-application-android"
      },
      {
        "target": "*.siilo.com",
        "type": "application"
      },
      {
        "target": "https://apps.apple.com/ie/app/doctolib-siilo/id1083002150",
        "type": "mobile-application-ios"
      },
      {
        "target": "https://play.google.com/store/apps/details?id=com.siilo.android&hl=en",
        "type": "mobile-application-android"
      }
    ],
    "out_of_scope": [
      {
        "target": "Note: should you discover a critical issue within an asset that falls outside the program's scope, we would appreciate it and may choose to offer a reward at our discretion.",
        "type": "other"
      },
      {
        "target": "community.doctolib.com | .fr | .de | .it",
        "type": "other"
      },
      {
        "target": "info.doctolib.com | .fr | .de | .it",
        "type": "other"
      },
      {
        "target": "status.doctolib.com | .fr | .it",
        "type": "other"
      },
      {
        "target": "store.doctolib.com",
        "type": "other"
      },
      {
        "target": "media.doctolib.com",
        "type": "other"
      },
      {
        "target": "fb.doctolib.com | fb-dev.doctolib.fr",
        "type": "other"
      },
      {
        "target": "pro-app.doctolib.com",
        "type": "other"
      },
      {
        "target": "developers.doctolib.com",
        "type": "other"
      },
      {
        "target": "dmp.doctolib.fr | dmp-prd-aws-*.doctolib.fr",
        "type": "other"
      },
      {
        "target": "fm.doctolib.fr | fm.doctolib.it | voip.doctolib.de and other decommissioned / dangling Doctolib sub-domains",
        "type": "other"
      },
      {
        "target": "doctocommit.doctolib.fr",
        "type": "other"
      },
      {
        "target": "share.doctolib.net",
        "type": "other"
      },
      {
        "target": "doctolib.atlassian.net and any *.atlassian.net path",
        "type": "other"
      },
      {
        "target": "doctolib.zendesk.com | siilo.zendesk.com",
        "type": "other"
      },
      {
        "target": "api.tanker.io (Accessing the tanker private key is normal functioning of the Tanker protocol)",
        "type": "other"
      },
      {
        "target": "There is no IDOR on /api/security/tanker_groups via subject_id",
        "type": "other"
      },
      {
        "target": "exceptions.doctolib.fr | .de",
        "type": "other"
      },
      {
        "target": "billing-client-logs.billing.doctolib.fr | api-external.datascience.doctolibdata.com",
        "type": "other"
      },
      {
        "target": "doctolib-ps-ehr-downloads.s3.amazonaws.com",
        "type": "other"
      },
      {
        "target": "vettore.it and any related Vettore assets",
        "type": "other"
      },
      {
        "target": "Craft CMS on www.siilo.com, plus siilo.com marketing / staging sub-domains (l.siilo.com, l-dev.siilo.com, web.siilo.com, web-dev.siilo.com, www-admin.siilo.com, mjt-dev.siilo.com, att-dev-nl.siilo.com, sandbox-nl.siilo.com, connect.siilo.com, prod-nl-web.siilo.com)",
        "type": "other"
      },
      {
        "target": "Third-party assets linked from our products (e.g. login.decathlon.net, wallet.esw.esante.gouv.fr, preprod.alaxione.fr, hooks.zapier.com, cron.signitic.app, job-boards.greenhouse.io, docto.digitalstack.it, and any hospital-specific or customer-specific host)",
        "type": "other"
      },
      {
        "target": "Any *.sslip.io, *.nip.io, AWS ELB / load-balancer hostname, or raw IPv4 / IPv6 address",
        "type": "other"
      },
      {
        "target": "Look-alike, typo-squatting or expired domains not owned by Doctolib (e.g. www.dioctolib.de, doctolib.fr.evil.com, doctodketest.tk, doctolib-poc.partner-experience.com)",
        "type": "other"
      },
      {
        "target": "Public GitHub repositories we do not own (such as student projects doing)",
        "type": "other"
      }
    ]
  }
}