Kiteworks Public Bug Bounty Program

{
  "id": "kiteworks-public-bug-bounty-program-1",
  "name": "Kiteworks Public Bug Bounty Program",
  "public": true,
  "disabled": false,
  "managed": null,
  "min_bounty": 0,
  "max_bounty": 50000,
  "targets": {
    "in_scope": [
      {
        "target": "Crown Jewel Heist",
        "type": "challenge"
      },
      {
        "target": "Kiteworks Core",
        "type": "web-application"
      },
      {
        "target": "Email Protection Gateway (EPG)",
        "type": "web-application"
      },
      {
        "target": "Managed File Transfer (MFT)",
        "type": "web-application"
      },
      {
        "target": "Secure Data Forms (SDF, aka Advanced Forms)",
        "type": "web-application"
      },
      {
        "target": "API Playground",
        "type": "web-application"
      },
      {
        "target": "Kiteworks Android App",
        "type": "mobile-application-android"
      },
      {
        "target": "Kiteworks iOS App",
        "type": "mobile-application-ios"
      },
      {
        "target": "Kiteworks for Desktop",
        "type": "application"
      },
      {
        "target": "Kiteworks Desktop Client 2.0",
        "type": "application"
      },
      {
        "target": "Kiteworks for Outlook Desktop",
        "type": "application"
      },
      {
        "target": "Kiteworks for Office Desktop",
        "type": "application"
      }
    ],
    "out_of_scope": [
      {
        "target": "Testing is only authorized on the targets listed as in scope. Any domain/property of Kiteworks not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Kiteworks, you can report it here. However, be aware that it is ineligible for rewards or points-based compensation.",
        "type": "other"
      }
    ]
  }
}